authelia/docs/community/oidc-integrations.md
Helvio Pedreschi 71511a5c4f
docs: fix typo (#3191)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-15 10:43:04 +10:00

9.3 KiB

layout title parent nav_order has_children has_toc
default Community-Tested OIDC Integrations Community 5 true false

OIDC Integrations

Note This is community-based content for which the core-maintainers cannot guarantee correctness. The parameters may change over time. If a parameter does not work as documented, please submit a PR to update the list.

Currently Tested Applications

Application Minimal Version Notes
Bookstack 21.10
Gitea 1.14.6
GitLab 13.0.0
Grafana 8.0.5
Harbor 1.10 It works on >v2.1 also, but not sure if there is OIDC support on v2.0
Hashicorp Vault 1.8.1
Miniflux 2.0.21
MinIO RELEASE.2021-11-09T03-21-45Z must set MINIO_IDENTITY_OPENID_CLAIM_NAME: groups in MinIO and set MinIO policies as groups in Authelia
Nextcloud 22.1.0 Tested using the nextcloud-oidc-login app - Link
Portainer CE 2.6.1 Settings to use username as ID: set Scopes to openid and User Identifier to preferred_username
Seafile 9.0.4 Requires OAUTH_ATTRIBUTE_MAP to contain the mapping of the id field even if not present in Authelia, e.g. 'id': (False, "unused") (see seahub#5162)
Verdaccio 5 Depends on this fork of verdaccio-github-oauth-ui: Link
Wekan 5.41

Known Callback URLs

If you do not find the application in the list below, you will need to search for yourself - and maybe come back to open a PR to add your application to this list so others won't have to search for them.

<DOMAIN> needs to be substituted with the full URL on which the application runs on. If GitLab, as an example, was reachable under https://gitlab.example.com, <DOMAIN> would be exactly the same.

Application Version Callback URL Notes
Bookstack 21.10 <DOMAIN>/oidc/callback
Gitea 1.14.6 <DOMAIN>/user/oauth2/authelia/callback ROOT_URL in [server] section of app.ini must be configured correctly. Typically it is <DOMAIN>/. The string authelia in the callback url is the Authentication Name of the configured Authentication Source in Gitea (Authentication Type: OAuth2, OAuth2 Provider: OpenID Connect).
GitLab 14.0.1 <DOMAIN>/users/auth/openid_connect/callback
Harbor 1.10 <DOMAIN>/-/oauth/callback
Hashicorp Vault 14.0.1 <DOMAIN>/oidc/callback and <DOMAIN>/ui/vault/auth/oidc/oidc/callback
Miniflux 2.0.21 <DOMAIN>/oauth2/oidc/callback Set via Miniflux OAUTH2_REDIRECT_URL configuration parameter. Example value follows this format
MinIO RELEASE.2021-07-12T02-44-53Z <DOMAIN>/oauth_callback
Nextcloud 22.1.0 + nextcloud-oidc-login app <DOMAIN>/apps/oidc_login/oidc
Portainer CE 2.6.1 <DOMAIN>
Seafile 9.0.4 <DOMAIN>/oauth/callback/ Must exactly match OAUTH_REDIRECT_URL value as set in seahub_settings.py
Verdaccio 5 <DOMAIN>/oidc/callback
Wekan 5.41 <DOMAIN>/_oauth_oidc